Ggatten at waddell
Aug 23, 2011, 2:35 AM
Post #5 of 5
(665 views)
Permalink
|
No pid... Not sure on that one. Maybe your OS build or something.
"Man tcpdump". This should get you started:
"Tcpdump -nn -vvv -s 1500 port 2055". (Where 2055 is YOUR netflow port).
What version of ntop? If not at least 4.0.1, upgrade.
From: azadeh hashemi [mailto:xlbrlx [at] yahoo]
Sent: Tuesday, August 23, 2011 04:06 AM
To: Gary Gatten; ntop [at] unipi'" <ntop [at] unipi>
Subject: Re: [Ntop] nTop does not show any netflow
in addition I don't know how to use tcpdump :">
________________________________
From: azadeh hashemi <xlbrlx [at] yahoo>
To: Gary Gatten <Ggatten [at] waddell>; "ntop [at] unipi'"" <ntop [at] unipi>
Sent: Tuesday, August 23, 2011 1:34 PM
Subject: Re: [Ntop] nTop does not show any netflow
the output of netstat -anp | grep 2055 was:
udp 0 0 0.0.0.0:2055 0.0.0.0:* -
there is no pid!!
________________________________
From: Gary Gatten <Ggatten [at] waddell>
To: "'ntop [at] unipi'" <ntop [at] unipi>; "'xlbrlx [at] yahoo'" <xlbrlx [at] yahoo>
Sent: Tuesday, August 23, 2011 1:15 PM
Subject: Re: [Ntop] nTop does not show any netflow
Run tcpdump and ensure the flows are making it to your ntop host. If so, run "netstat -anp" and ensure there is is something listening on "your" netflow port: 2055, 2056, etc. Then compare the pid listed to that of ntop and ensure they are the same. Lastly you MUST "Admin" -> "switch NIC" and choose your netflow NIC.
From: azadeh hashemi [mailto:xlbrlx [at] yahoo]
Sent: Tuesday, August 23, 2011 03:21 AM
To: ntop [at] listgateway <ntop [at] listgateway>
Subject: [Ntop] nTop does not show any netflow
Hi
in order to see the netflows, I configure my cisco router and it perfectly show them (by "show ip cache flow")
then I try to configure my netflow plugin in ntop, and did as such instructions say. but now it does not show anything and I don't know what should I do . Sorry I'm a new to these, Help me please...
"This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system."
<font size="1">
<div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'>
</div>
"This email is intended to be reviewed by only the intended recipient
and may contain information that is privileged and/or confidential.
If you are not the intended recipient, you are hereby notified that
any review, use, dissemination, disclosure or copying of this email
and its attachments, if any, is strictly prohibited. If you have
received this email in error, please immediately notify the sender by
return email and delete this email from your system."
</font>
|
